It's not stealing, because you request the resource from the server and the server explicitly decides to fulfill your request. And this isn't exploiting a bug or security vulnerability. The server is deliberately programmed to fulfill requests regardless of whether the requester's client.

If running an ad blocker is stealing, then so is disabling JavaScript or using curl.